Skip to content
OpenAdvisories
Unscored CVE-2017-0433 EUVD-2017-0787GHSA-jv3x-hhc4-2hvx

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary…

Published Feb 8, 2017 · Updated Aug 5, 2024 · Assigned by google_android

Description

An elevation of privilege vulnerability in the Synaptics touchscreen driver could enable a local malicious application to execute arbitrary code within the context of the touchscreen chipset. This issue is rated as High because it first requires compromising a privileged process. Product: Android. Versions: Kernel-3.10. Android ID: A-31913571.

Affected products

VendorProductAffectedFixed
Google Android Kernel-3.10 —

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS android No fix yet —

References